Privacy policy

Information on the processing of personal data collected via this website
Last reviewed: 01/09/2025

1. Premise and regulatory references
This notice explains the processing of personal data collected through this website, including that acquired via cookies, tracking technologies, and – where applicable – contact forms, private areas, digital services, and electronic financial transactions. .
The Privacy Policy is aimed at anyone who accesses or uses this website, describing the methods of collection, use, and protection of the user's personal data, as well as the rights recognised by law.
These provisions do not apply to other websites, pages or online services accessible via external links that may be present on the site, for which we invite you to consult their respective privacy policies.
This notice is provided in compliance with the main national and international data protection regulations, including:

• Regulation (EU) 2016/679 (GDPR)
• Other applicable regulations.

2. Who manages your data and how can you contact us?
Your personal data are processed by:
Ski Residence Di Anna Toffol E C. Sas
Via Giovanni e Vittore Toffol, 13
info@skiresidence.it
VAT number: 01426910228

For any information relating to the processing of personal data or to exercise their rights under the regulations, data subjects may contact the Data Controller.

3. On what legal grounds do we process your data?
The processing of personal data collected through this website (including data collected via cookies, similar technologies, contact forms, restricted areas, digital services, and transactions, where applicable) is based on one or more of the following legal grounds:

1. Carrying out a pre-contractual service or activity request from the user via the contact forms provided;
2. Compliance with legal, regulatory, or statutory obligations;

A further legal basis, the legitimate interest of the Controller, it can be used for specific purposes (e.g. ensuring IT security, preventing fraud, protecting the Data Controller's rights in legal proceedings).

Failure to accept or withdrawal of consent may reduce or limit certain functionalities or personalised services.

4. What data do we collect when you visit the website?
During navigation on this website, the following data may be collected, including through cookies and similar technologies such as pixel tags, web beacons, local storage, and equivalent technologies:

• Navigation and technical data Information such as IP address, device identifiers, operating system and browser data, requested URLs, connection times, technical logs, technical preferences, usage data collected via cookies and tracking technologies (pixel tags, web beacons, local storage, and equivalent tools).

• Data communicated via social integrations and third-party platforms: data transmitted through social features (login, plugins, shares, etc.), processed according to the rules of the respective platforms as well as according to this policy.

5. How do we process your data, how do we protect it and for how long do we keep it?
The personal data collected through this website are processed predominantly using electronic and digital tools, in accordance with the principles of lawfulness, fairness, data minimisation, integrity, and confidentiality.

The data is kept for the following periods:

• Cookie preferences and consents: retained for 180 days, as per the Cookie Policy on this website.
• Navigation and technical data retained only for the time necessary to ensure the security, integrity, and functionality of the site and subsequently anonymised or aggregated.
• Data collected for contractual and transactional purposes: retained for the period required by applicable laws (e.g., tax or accounting regulations).
• Data processed for marketing purposes: retain until consent is revoked or deletion is requested.
• Data entered via forms or specific requests retained for as long as necessary to respond or fulfil the relevant purpose.

6. Who can receive your data?
They may access the personal data collected through this site, within the limits of their respective competences and purposes:

• Authorised internal subjects from the Data Controller, duly instructed in privacy and security matters;
• Suppliers and third parties appointed as data processors (e.g. technical providers, IT companies, customer support companies, consultants, payment service providers and logistics providers, where applicable);
• Business partners, third parties and affiliates, exclusively for promotional/marketing purposes if you have given specific consent or opted out where provided;
• Parties that provide plug-ins, social networks, and external platform interaction services, who can process personal data according to their own logic as independent data controllers (in such cases, also consult the individual notices of these third parties);
• Competent public authorities and supervisory bodies, within the limits imposed by law or to satisfy requests from the judicial authority;

The updated list of external recipients can be made available upon request by writing to the Data Controller's contact details.

7. Where can your data be transferred?
The personal data collected via this website may be processed and transferred – for the purposes indicated – to the following countries:

• to countries belonging to the European Economic Area (EEA), Switzerland, or other countries recognised by the competent authorities as having an “adequate” level of protection as required by law;

Updated list of “trusted” countries”:

• EU
• Switzerland

8. What are your rights regarding the data collected?
The user, under the applicable regulations, has the right to:

• Obtain confirmation as to whether personal data relating to them is being processed and, if so, to obtain access to such data and related information (right of access).
• Requesting the rectification, updating, or deletion of inaccurate or no longer necessary data (right to rectification and erasure).
• Request to restrict or object to the processing of data, including for promotional/profiling purposes, where applicable.
• Request data portability in a structured and interoperable format (where technically feasible).
• Withdraw consent given for the use of non-technical cookies, for the processing of data collected via tracking tools.
• Report any irregularities or abuses to the relevant supervisory authorities.

To exercise these rights, simply send a request to the Data Controller's contact details, who will respond within the timeframe stipulated by applicable local regulations.

9. How is children's data processed?
The protection of minors is a fundamental priority.

The services and content on this website are not intended for individuals under the age of 18.

We do not knowingly collect personal data from minors without verifiable consent from a parent or guardian.

If a parent or guardian believes that a minor has provided personal data without authorisation, they may request its deletion, updating, or restriction of processing by writing to the contact details provided in this notice.

10. How to make reports or complaints to the authorities?
If you believe that the processing of your personal data via this website is not compliant with current regulations, you may lodge a complaint free of charge with the competent Supervisory Authorities, including:

• The Data Protection Authority of your State of citizenship or residence;
• European Data Protection Supervisor

How will we inform you about changes to this policy?
This information is subject to periodic review to comply with regulations or changes to the services offered via the website. Any significant alterations will be communicated via this page.
Last reviewed: 01/09/2025